This notice (hereinafter: "Notice") provides information about the processing of personal data carried out through the website www.artweekendbudapest.hu (hereinafter: "Website") of the Art Weekend Budapest festival (hereinafter: "Festival") in connection with registration, contacting us, uploading application materials, newsletter subscription, and the documentation of Festival events.
In compliance with the EU General Data Protection Regulation (GDPR, 2016/679/EU) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as well as Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.), we hereby inform you about the processing of the personal data you provide:
Data Controller: ArtNESZ Fine Arts Agency Ltd. (ArtNESZ Képzőművészeti Ügynökség Kft.)
Registered / mailing address: 2030 Érd, Murányi u. 20., Hungary
Tax number: 26639046-2-13
Company registration number: 13-09-197718
Website: www.artnesz.hu
Email: hello@artnesz.hu
The Data Controller:
For the purposes of this Notice, any person who enters or visits the Website is considered a data subject (hereinafter: "User"), and may provide the following data during their visit:
"Registration for a program" form: full name, email address, name of the selected program, date and time of registration
Contact form, "Get in touch": full name, email, message
Contributors, partners, applicants: name of organization/full name, email address; name, email address, and phone number of the contact person; application materials (photos, videos, portfolio, PDF, introduction, CV, website, social media link) and related copyright and credit information
"Newsletter subscription" form: full name, email address, date of consent
Event documentation: the participant's likeness, and possibly voice, in the case of video recordings
a) Registration for a program
Purpose: recording the User's reservation, confirming participation via an automatic confirmation email, providing information and updates to interested parties
Legal basis: processing necessary for the performance of the participation (GDPR Art. 6(1)(b)) — by submitting the registration form.
b) Contact form
Purpose: receiving and responding to inquiries submitted through the contact form, maintaining contact with interested parties, providing requested information
Legal basis: the User's consent (GDPR Art. 6(1)(a)) — by submitting the contact form
c) Contact with contributors and partners, application submissions
Purpose: handling inquiries received by email or form, collecting application materials, providing information and updates to contributors, partners, and applicants
Legal basis: the User's consent (GDPR Art. 6(1)(a)) and processing necessary for the performance of the participation (GDPR Art. 6(1)(b)) — by sending an email or form, attaching application materials
d) Newsletter subscription
Purpose: maintaining a register of newsletter subscribers, contacting subscribers, sending information about the Festival and its participating exhibitors
Legal basis: the data subject's separate, voluntary, explicit consent (GDPR Art. 6(1)(a)) — this consent is given independently of registration, via a separate checkbox, and may be withdrawn at any time without restriction
e) Event documentation (photo and video recording)
Purpose: documenting the Festival's programs, promoting the event, and providing information about the event
Legal basis: for crowd/group shots, the Data Controller's legitimate interest (GDPR Art. 6(1)(f)); for individual portraits, the data subject's consent (GDPR Art. 6(1)(a)) — as described in this Notice
Data may be transferred to the Data Processors specified in this Notice without the User's separate consent. Personal data will not be disclosed to any other third party or authority — unless otherwise provided by law — except pursuant to an official decision or with the User's prior, explicit consent.
If the User separately consents, via a checkbox, during newsletter subscription, their data (name, email address) may be shared with the Festival's participating venues (exhibition spaces, artists, galleries, institutions) listed on the Website, solely for the purpose of sending newsletters. These Festival venues act as independent data controllers in this respect.
The Data Controller operates program and newsletter registrations through the Brevo email delivery system, integrated into its custom-developed website, hosted on the following web hosting provider's servers:
Hosting provider: Magyar Hosting Kft., H-1119 Budapest, Fehérvári út 97-99., Hungary — https://www.mhosting.hu/
Applications for the Open Call are submitted via an embedded Google Forms, and the data is received into the Google Forms/Google Sheets system.
The Data Controller uses Google Workspace (Gordon House, Barrow Street, Dublin 4, Ireland) as a data processor for sending response emails to User inquiries, and transfers to it the data provided by users for this purpose. Application files are stored on Google Drive.
The Data Controller transfers personal data outside the European Economic Area only if such transfer complies with the safeguard requirements set out in Chapter V of the GDPR.
The Data Controller processes personal data only to the extent and for as long as necessary to achieve the purpose of processing. Personal data is stored in a form that permits identification of the User only for as long as is necessary for the purposes for which the personal data are collected or further processed.
Registration data: 3 months after the conclusion of the Festival, after which it is deleted.
Contact form data: 3 months after the conclusion of the Festival, after which it is deleted.
Application data: 3 months after the conclusion of the Festival, after which it is deleted.
Newsletter data: until consent is withdrawn / unsubscription
Raw photos and videos: 12 months after the Festival, after which they are deleted.
Selected, published, and archived recordings: as part of the Festival's archive, for as long as the communication and archival purpose persists, following the conclusion of the Festival
Copyright to photos and videos uploaded for applications belongs to the applicant; the Data Controller uses them solely for the purpose of evaluating the application and for the purposes specified in the call for applications.
Photo and video recordings made for event documentation purposes are used on the Festival's and the Data Controller's official websites, social media platforms, newsletters, and printed and online communication materials. The data subject may request the removal of an individual recording of themselves, provided that the legal conditions for this are met.
The Data Controller strives to ensure that recordings made at the event primarily showcase the event as a whole, its atmosphere, and the communal experience.
If the User submits a request regarding the processing carried out by the Data Controller, the Data Controller will inform the User of the measures taken, or the reasons for not taking action, no later than one month from the date of receipt of the request; in the latter case, the User will also be informed of their right to lodge a complaint and seek a legal remedy. If justified by the complexity or number of requests received, the Data Controller may extend this deadline by a further two months. The Data Controller will inform the data subject of any such extension and its reason within one month of receipt of the request.
To protect the User's rights and to fulfil data security requirements, the Data Controller will in every case verify the identity of the User and the person exercising the right, and may request further information if necessary.
To exercise your rights as a User, please write to hello@artnesz.hu.
Cookies are small data files installed by the browser when the User visits the website.
Our website uses only a strictly necessary session cookie, which is required for the basic functioning of the Website (for example, to remember the language setting during a given visit). This cookie is temporary in nature and is automatically deleted when the browser is closed — we do not store any persistent, long-term cookies on the User's computer.
Our website does not use analytical, statistical, or advertising cookies, and does not analyze Users' browsing habits.
If the User removes or disables this cookie, certain functions of the Website (such as remembering the language selection) will not work properly.
If you believe that the processing of your data violates the applicable laws, you may lodge a complaint:
The Data Controller and its data processors are entitled to access the User's personal data only to the extent necessary for the performance of their job duties. The data may only be accessed by those employees of the Data Controller whose task is to manage registrations, evaluate applications, maintain contact, or send out newsletters.
The Data Controller is committed to protecting personal data against loss, unlawful use, unlawful transfer, alteration, unavailability, or destruction, and takes all security, technical, and organizational measures necessary to guarantee the security of personal data.
Last updated: Budapest, 24 July 2026.